Customer Tips. Vista Client Point and Print Authentication During Driver Install or Upgrade. for the user. Introduction

Transcription

1 Xerox Multifunction Devices Customer Tips December 13, 2007 This document applies to all Xerox print drivers that reside on Microsoft Windows Vista operating systems. for the user Vista Client Point and Print Authentication During Driver Install or Upgrade Introduction Windows Vista adds additional security to make it the most secure version of Windows to date. Point and Print is the feature that enables a Microsoft Windows user to connect and print to a remote printer without the need for the user to access any disks or other installation media. In Windows Vista the user is notified and needs administrator privileges before Point and Print can install a printer driver from a remote computer. This may be seen as an error by some users or system administrators (SA); hence it may be seen as functionality that defeats the purpose of centralized administration. This document describes this behavior and the changes needed to address this functionality. Point and Print Vista Client Functionality In Windows Vista the user is notified before Point and Print can install a printer driver from a remote computer. Windows Vista users will see the following behavior by default: When Point and Print begins to install the printer driver, the user will be prompted with a warning dialog. If the user clicks Install printer and does not have administrator privileges, they will be prompted for Administrator credentials in a User Account Control (UAC) dialog. The user will see the same warnings when an updated driver is available for an existing connection to the print server. Given this, the act of installing any add-on, service pack, or print driver from any vendor which upgrades shared UNIDRV.DLL or PSCRIPT5.DLL files on the print server will, under default group policies, require the SA to visit each and every Vista client PC to log in as admin and accept the same new files that the SA securely installed on the print server. This issue was discussed by both Xerox and Microsoft Development Teams as this functionality may be viewed by users as defeating the concept of a centralized administration. The conclusion was not to change the Vista OS behavior because it would compromise the Windows Vista security strategy. To address this issue a systems administrator could modify the domain group policy specifically for this situation. The group policy change would allow drivers to be downloaded to user s systems from approved print servers. Customer Support Page 1

2 Modifying the Domain Group Policy By modifying the domain group policy on the client you will be able to disable the Vista prompts for all Vista users within the domain. 1. Log in a Windows Vista client as a domain administrator 2. Select [Start], [Run], type mmc in the Open field, and select [OK]. 3. Within the Microsoft Management Console select [File] and [Add/Remove Snap-in ] from the drop-down menu. 4. Within the Add or Remove Snap-ins window select [Group Policy Object Editor] and click the [Add >] button. 5. Within the Select Group Policy Object window click on the [Browse ] button. 6. Within the Browse for a Group Policy Object window select [Default Domain Policy] and click-on the [OK] button. 7. Select the [Finish] button within the Select Group Policy Object window. Page 2 Customer Support

3 8. Select the [OK] button within the Add or Remove Snap-ins window. 9. Within the Microsoft Management Console select [Default Domain Policy ] then [User Configuration] then [Administrative Templates] then [Control Panel] then [Printers] 10. Double click on [Point and Print Restrictions]. 11. This issue can be addressed in one of two ways. Either by disabling the Point and Print Restrictions, or by disabling only the Vista restrictions. Customer Support Page 3

4 Disable the Point and Print Restrictions a) Select the [Disabled] button and b) Click-on the [Apply] button. Disable Only the Vista restrictions a) Select the [Enabled] button. b) Scroll down to the Security Prompts: section. c) Using the pull-down menu under both When installing drivers for a new connection: and When updating drivers for an existing connection: select [Do not show warning or elevation prompt]. d) Click-on the [Apply] button. 12. Exit out of the Microsoft Management Console. 13. You have successfully updated the Point and Print restrictions domain group policy. The Vista operating system will no longer prompt the user for credentials when common files are updated. Page 4 Customer Support

5 Supplemental Microsoft Information Windows Point and Print Technical Overview Point and Print Security on Windows Vista Additional Information Xerox Customer Service welcomes feedback on all documentation - send feedback via e- mail to: USA.DSSC.Doc.Feedback@mc.usa.xerox.com. You can reach Xerox Customer Support at (USA), TTY or at Other Tips about Xerox multifunction devices are available at the following URL: XEROX, The Document Company, the digital X, and all Xerox product names are trademarks of XEROX CORPORATION. Other trademarks belong to their respective owners XEROX CORPORATION. All Rights Reserved. Customer Support Page 5